The AT Protocol website is the official home for the protocol powering Bluesky and other decentralized social apps. It's a legitimate project, but the site offers surprisingly little about who runs it. There's no about page, no contact information, and no social media links on the homepage. For a protocol that claims 40 million users, that's a transparency gap worth noting. Most established open-source projects provide at least a GitHub link or a team page. The technical side is solid: the site uses a valid encrypted connection, has never been blacklisted, and loads quickly. The privacy policy and terms of service are present, which is good. If you're looking for atproto.com reviews, the consensus among developers is that it's the real deal, but you'll want to verify details through the project's GitHub or Bluesky's official blog. The lack of transparency doesn't make it a scam, but it does mean you should cross-check information elsewhere before relying on the site for critical decisions.
In plain English
The AT Protocol website is a legitimate resource for a decentralized social networking protocol, but it's light on details about who runs it. The technical setup is solid and there are no red flags, but the lack of a clear contact or about page means you'll have to rely on the project's reputation elsewhere. It's safe to use the documentation and tools, but be aware that the site itself doesn't make it easy to verify who's behind it.
Where the score comes from
The site uses a modern encrypted connection and passes Google's malware checks, but it doesn't set basic browser protections like clickjacking prevention. That's a minor gap for a technical documentation site, not a dealbreaker.
The domain is 3.75 years old and registered through a mainstream registrar with no hidden WHOIS. The project behind it is well-known in the social web space, but the site itself doesn't explicitly name the organization or individuals running it.
No blacklists, no malware flags, and the domain has a clean history. The Wayback Machine shows old snapshots from a previous owner, but that's irrelevant to the current site's trustworthiness.
There's no contact page, no about page, and no social media links on the homepage. For a protocol project that's used by millions, this is a noticeable gap. You'd need to look at the project's GitHub or blog to find who's behind it.
Privacy policy and terms of service are present, which is enough for a non-commercial resource site. No cookie consent banner is expected for a site that doesn't appear to collect personal data.
Solid DNS setup with Cloudflare, email authentication configured, and fast page loads. DNSSEC isn't enabled, but that's common and not a risk for a site that doesn't handle sensitive transactions.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →